R3D-Z3R0 comments

Repositories
Issues
Comments

Results 2 comments of


                                            R3D-Z3R0

[Security] Vulnerable to XSS

Hello @samuelemarro , in your workaround does it sanitize the below payload: [a] (javascript:prompt(document.domain)) Note: remove the space after [a]

> @R3D-Z3R0 Can confirm it sanitizes. You can check it live [here](https://beta.zang.gallery/mint) (select Markdown from the dropdown). @jaywcjlove @samuelemarro We have faced another issue with another payload, it renders whatever...